NEAS[.]6b40d6e7cdec0e6354d0c8c1c88ebe50_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6b40d6e7cdec0e6354d0c8c1c88ebe50_JC.exe
Size

467KB
MD5

6b40d6e7cdec0e6354d0c8c1c88ebe50
SHA1

9599003f54e0c92d972af7cb62bb8db3be85cc43
SHA256

b20b4aa4a83019d8b0fd4a5baf39ecf0b18b71170acf3140756dfffed80beb13
SHA512

128411480e9541871d419a5b7b74a24d4f48741cbf587796c437858cc2f280b6706ee92e8a02c8f37cc7946bf2e36e90e35f10684bf711bfefc7187972432fff
SSDEEP

6144:mMKPpajeJyBxbrMqoKA+ECpx8i+6ySP9r+Z6MtUvvzXNvc2QlJhZilf:oPojeJ8Fd3YX6y16MtUXzdFQDI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6b40d6e7cdec0e6354d0c8c1c88ebe50_JC.exe

Files

NEAS.6b40d6e7cdec0e6354d0c8c1c88ebe50_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ